When you search for available updates on the Windows Update Web site or on the Microsoft Update Web site, you may receive the following error code:

Back to the top

This issue may occur if the date and time on the computer varies too much from the valid date and time of the Secure Socket Layer (SSL) certificates that are used by the Windows Update Web site.

Back to the top

To resolve this issue, use the following methods in the order in which they are presented. If one method does not resolve this issue, go to the next method.

Back to the top

Method 1: Verify and adjust the date and time settings

To do this, follow these steps, as appropriate for the operating system that you are running.

Windows 2000, Windows XP, and Windows Server 2003

1.	Click Start, and then click Run.
2.	In the Open box, type Timedate.cpl, and then click OK.
3.	On the Date and Time tab, make sure that the computer's date and time are correct. If the settings are incorrect, adjust them to the correct date and time.
4.	Click OK to close the Date and Time Properties dialog box.
5.	Try to install updates again.

Windows Vista and Windows Server 2008

1.	Click the Start, type timedate.cpl in the Start Search box, and then click Timedate.cpl on the programs list.
2.	On the Date and Time tab, make sure that the computer's date and time are correct. If the settings are incorrect, click Change date and time. If you are prompted for an administrator password or confirmation, type the password, or provide confirmation.
3.	In the Date and Time dialog box, use the following procedures: • To change the date Under Date, click the left or right arrows to find the current month in the calendar, and then click the current date. • To change the time Under Time, double-click the hour, minutes, or seconds that you want to change, and then click the arrows to increase or decrease the value.
4.	When you finish changing the date and time settings, click OK.
5.	Try to install updates again.

Back to the top

Method 2: Install the most current Microsoft root certificate update

Note Use this method if you are running Windows 2000, Windows XP, or Windows Server 2003.

To install the most current root certificate update, visit the following Microsoft Windows Update Web site:To find the root certificate update, use Windows Update to scan the computer, and then click Software, Optional. The root certificate update appears under the Optional Software Updates heading.

This item updates the list root certificates to the latest list that is accepted by Microsoft as part of the Microsoft Root Certificate Program. When you add more root certificates to the computer, you let a wider range of applications work seamlessly. These applications include applications that provide security-enhanced Web browsing, encrypted e-mail, and security-enhanced code delivery.

After you install this update, you may have to restart the computer. For more information about Microsoft Root Certificate Program members, visit the following Microsoft Web site:To install the latest Microsoft root certificate for Windows XP, visit the following Microsoft Web site:

Back to the top

Method 3: Click to clear the "Check for server certificate revocation" check box

Note Use this method if you are running Windows 2000, Windows XP, or Windows Server 2003.

1.	Start Internet Explorer.
2.	On the Tools menu, click Internet Options. Note If you do not see the Internet Explorer menu bar, press the ALT key to display the menu.
3.	Click the Advanced tab, and then locate the Security section.
4.	Click to clear the Check for server certificate revocation check box, and then click OK.
5.	Restart the computer.
6.	Try to install updates again.

Back to the top

Method 4: Register the Softpub.dll, Wintrust.dll, Initpki.dll, and Mssip32.dll files

To do this, follow these steps, as appropriate for the operating system that you are running.

Windows 2000, Windows XP, and Windows Server 2003

1.	Click Start, and then click Run.
2.	In the Open box, type the following file names. Click OK after each file name: • regsvr32 Softpub.dll /s • regsvr32 Wintrust.dll /s • regsvr32 Initpki.dll /s • regsvr32 Mssip32.dll /s

Windows Vista and Windows Server 2008

1.	Click Start, type regsvr32 Softpub.dll /s in the Start Search box, and then click OK. If you are prompted for an administrator password or for a confirmation, type the password, or click Continue.
2.	Repeat step 1 for the following file names: • regsvr32 Wintrust.dll /s • regsvr32 Initpki.dll /s • regsvr32 Mssip32.dll /s

Back to the top

For more information about this issue in Windows Vista or in Windows Server 2008, visit the following Microsoft Web site:

Back to the top